CVE-2025-54509 | THREATINT

Description

Improper access control for register interface in the input-output memory management unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD secure processor (ASP) potentially resulting in loss of integrity.

PUBLISHED Reserved 2025-07-23 | Published 2026-06-09 | Updated 2026-06-09 | Assigner AMD

MEDIUM: 4.0CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N

Problem types

CWE-1262 Register Interface Allows Software Access to Sensitive Data or Security Settings

Product status

Default status

affected

GenoaPI_1.0.0.H

unaffected

Default status

affected

TurinPI_1.0.0.8

unaffected

Default status

affected

GenoaPI_1.0.0.H

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbeddedTurinPI_SP5_1004

unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-3039.html

cve.org (CVE-2025-54509)

nvd.nist.gov (CVE-2025-54509)

Download JSON